Commit Graph

2124 Commits

Author SHA1 Message Date
pyth0n1c a5a54def02 Branch was auto-updated. 2022-09-14 09:54:32 -07:00
pyth0n1c fe1d286217 Branch was auto-updated. 2022-09-14 09:17:36 -07:00
pyth0n1c 5af60a2412 Branch was auto-updated. 2022-09-14 09:17:30 -07:00
patel-bhavin 96e81ef195 adding test file updates 2022-09-13 18:49:00 -05:00
patel-bhavin 7ae6ec7be1 search updates and datasets 2022-09-13 17:37:24 -05:00
patel-bhavin fd475e9625 adding datasets 2022-09-13 15:33:46 -05:00
pyth0n1c e807d51570 Branch was auto-updated. 2022-09-06 14:07:50 -07:00
pyth0n1c 1be4026031 Branch was auto-updated. 2022-09-06 14:07:47 -07:00
Rod Soto 73e84a326d fixedpathlog 2022-09-06 13:40:08 -07:00
pyth0n1c cca076f667 Branch was auto-updated. 2022-09-02 19:15:41 -04:00
pyth0n1c 9894bf1583 Branch was auto-updated. 2022-09-02 19:15:34 -04:00
pyth0n1c 5c4d054652 Update linux_kernel_module_enumeration.test.yml
Changing sourcetype from linux_sysmon --> sysmon_linux
2022-09-02 18:50:48 -04:00
tccontre 1557a528cf brute-ratel-2 2022-08-31 10:12:55 +02:00
tccontre b401ed9d50 brute-ratel-2 2022-08-30 13:08:04 +02:00
pyth0n1c 8046a7933e Branch was auto-updated. 2022-08-26 11:42:38 -07:00
pyth0n1c 8f2a3bd754 Branch was auto-updated. 2022-08-26 10:01:45 -07:00
pyth0n1c bd2d1515cb Branch was auto-updated. 2022-08-26 10:01:42 -07:00
mvelazco 2a0c7a69d1 adding new detection 2022-08-25 16:02:54 -04:00
pyth0n1c 0ae64ea317 Branch was auto-updated. 2022-08-23 13:05:57 -07:00
pyth0n1c 4788d6c4e3 Branch was auto-updated. 2022-08-23 13:05:54 -07:00
pyth0n1c 7f5507a4c2 Branch was auto-updated. 2022-08-23 12:49:59 -07:00
pyth0n1c 80c9e04de8 Branch was auto-updated. 2022-08-23 12:49:55 -07:00
pyth0n1c b1fc807d1c Branch was auto-updated. 2022-08-23 12:49:52 -07:00
Michael Haag 8248278109 Remote Access Software 2022-08-22 21:57:53 -06:00
Michael Haag 13d400611a LSA 🐍 SS 2022-08-22 21:16:12 -06:00
Michael Haag fd88c88762 Hijack Libraries 2022-08-19 14:37:29 -06:00
d1vious 19f3a3b982 fixing on all places 2022-08-16 15:01:56 -04:00
mvelazco b2332df9a0 Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover 2022-08-16 12:13:02 -04:00
mvelazco d00a4b2ae6 updating detection yaml 2022-08-16 12:13:00 -04:00
pyth0n1c 8a72b522ac Branch was auto-updated. 2022-08-16 08:40:57 -07:00
pyth0n1c 7d441871cb Branch was auto-updated. 2022-08-16 08:40:56 -07:00
d1vious b7e1a5fe94 adding new detections 2022-08-16 11:30:24 -04:00
gowthamarajr 6759feccd4 Add Azure AD Multi-Factor Authentication Disabled 2022-08-15 17:22:54 -04:00
pyth0n1c 31be7c1b3e Branch was auto-updated. 2022-08-12 13:01:04 -07:00
gowthamarajr ddf0db898d Merge branch 'TR_2301' of https://github.com/splunk/security_content into TR_2301 2022-08-12 07:27:19 -04:00
gowthamarajr bed8043fe8 Add 12 More detections (T1548) 2022-08-12 07:27:16 -04:00
pyth0n1c 084d711188 Branch was auto-updated. 2022-08-11 12:16:22 -07:00
pyth0n1c 9379ece487 Branch was auto-updated. 2022-08-11 12:16:14 -07:00
pyth0n1c 742d674a89 Branch was auto-updated. 2022-08-11 11:30:14 -07:00
pyth0n1c 2eb9bf40de Branch was auto-updated. 2022-08-11 11:30:10 -07:00
pyth0n1c 0136017be3 Branch was auto-updated. 2022-08-11 11:30:09 -07:00
Bhavin Patel 74ece59913 Merge pull request #2309 from splunk/tatertots
Haag it!
2022-08-11 11:29:48 -07:00
patel-bhavin 8d25d3d27a getpassworddata 2022-08-10 16:03:18 -07:00
mvelazco 5579f1ebdb adding new detection 2022-08-10 13:34:18 -04:00
gowthamarajr 51693e4ba5 Add T1548.003 2022-08-10 06:58:54 -04:00
gowthamarajr 3cc956cd99 Add AWS Credential Access detections 2022-08-08 01:47:33 -04:00
gowthamarajr 29a61f8cb6 Add detections for Awk, Node, Docker Lotl 2022-08-02 16:23:31 -04:00
Michael Haag 83e57921ad iscsi fix 2022-08-02 08:35:54 -06:00
tccontre 44517188c1 Rename windows_ingress_tool_transfer_using_explorer_exe.test.yml to windows_ingress_tool_transfer_using_explorer.test.yml 2022-08-01 14:22:35 +02:00
tccontre 7ef8d1dadf Update windows_ingress_tool_transfer_using_explorer_exe.test.yml 2022-08-01 14:18:38 +02:00